This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/O8GNRrFgoV9nUFEET24AKrFD4hc.roa File: O8GNRrFgoV9nUFEET24AKrFD4hc.roa (raw, json) Hash identifier: PjMa+XecFOAlP0lZIGes0ro9tCfVA4vx5agJFTI4cnk= Subject key identifier: 3B:C1:8D:46:B1:60:A1:5F:67:50:51:04:4F:6E:00:2A:B1:43:E2:17 Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77 Certificate serial: 019B7F13599A91B91755FCDE2041B78D5E12 Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/O8GNRrFgoV9nUFEET24AKrFD4hc.roa Signing time: Fri 02 Jan 2026 14:18:53 +0000 ROA not before: Fri 02 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203318 IP address blocks: 185.138.80.0/22 maxlen: 24 185.214.73.0/24 maxlen: 24 2a00:1ac1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:59:9a:91:b9:17:55:fc:de:20:41:b7:8d:5e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77 Validity Not Before: Jan 2 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bc18d46b160a15f675051044f6e002ab143e217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:1a:59:d8:bd:eb:ad:31:50:dc:bf:b0:cf: af:2a:d1:f1:3e:70:73:a3:ad:52:c8:71:0d:5a:b2: 11:7f:0a:ed:60:56:8e:4e:e2:cc:30:9e:c5:d5:db: 0b:d0:a6:67:5b:70:40:d1:04:9c:ee:30:d5:27:e8: 3a:19:fb:97:dd:0b:f0:48:ef:09:0e:a0:ae:20:77: 20:60:26:61:2b:fa:b1:e6:c4:a8:57:17:b4:40:ec: 9a:6d:8d:9d:49:fb:ba:61:08:0a:18:ab:e2:7d:ef: cc:77:d6:5f:9d:7e:83:ee:1a:2e:d0:86:61:6f:61: 1c:7e:8d:6d:f7:2a:3e:cb:e3:3f:7e:78:b1:0c:80: e6:fb:3e:06:a2:53:01:5d:7a:d6:55:30:5a:7b:fb: 7f:cf:e7:47:ff:9f:77:a2:fd:9c:26:12:9b:7a:28: b3:a8:e8:dd:30:e4:d1:40:b7:c3:19:d9:cf:f8:96: 68:7a:f9:25:a4:a0:77:99:aa:1b:4e:0a:35:c9:33: 6a:88:0a:36:d1:fd:b2:46:2a:50:cc:67:84:55:0d: 74:b8:87:08:51:cd:4b:ad:42:ea:f9:81:e0:00:9f: 3b:bc:d8:f1:ed:b3:47:26:7a:1b:fd:9d:f1:04:a9: e9:ce:fd:f3:4a:b9:95:e6:80:d2:35:4b:ea:63:f2: c6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C1:8D:46:B1:60:A1:5F:67:50:51:04:4F:6E:00:2A:B1:43:E2:17 X509v3 Authority Key Identifier: keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/O8GNRrFgoV9nUFEET24AKrFD4hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.80.0/22 185.214.73.0/24 IPv6: 2a00:1ac1::/32 Signature Algorithm: sha256WithRSAEncryption 8e:c7:64:0c:29:2c:1e:d4:d1:c3:c9:7a:f2:36:ff:14:02:6f: 6d:b0:94:be:80:62:a9:ca:47:8f:de:cf:8f:b0:c6:c7:74:17: c7:97:9b:f4:8d:34:ed:17:65:d7:32:1b:8b:df:bb:84:99:be: 04:df:de:84:a4:4c:fd:14:ff:77:6f:97:92:b0:72:06:b2:85: a0:26:36:fa:73:ab:a0:b0:eb:1c:b1:35:13:c9:7f:1c:53:94: 09:d3:49:e5:af:92:ef:07:82:86:56:17:ad:d5:cc:4f:17:59: ba:c0:0b:16:c8:10:c2:fa:ba:d8:c6:ba:9f:ce:c4:63:63:6e: 03:34:b8:05:f0:80:17:43:3c:a4:ca:db:56:46:7d:18:57:a2: b4:19:64:8c:ff:8e:72:36:ce:24:db:b1:b0:78:ed:85:3e:24: 0f:b6:0f:2a:c1:0e:6a:13:a9:f9:9d:b9:ee:7a:58:8f:c4:3a: b3:f5:9a:48:13:ca:34:54:46:e1:ef:cc:b1:06:5a:70:92:c0: ba:7a:e8:37:46:2c:7b:56:09:9e:79:26:aa:29:0b:2f:39:a7: f9:ae:b9:75:87:43:19:9d:aa:b3:86:ca:a6:f9:19:32:e4:61: 9b:28:fa:eb:62:0b:55:f3:58:82:be:a6:f9:12:c3:b1:41:cc: 7d:7a:15:4f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/E1makbkXVfzeIEG3jV4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzOWIwMTM1M2U1MWEzYTg3ZTgzNTk2M2JkODgzM2VkODE4 NTNkNzcwHhcNMjYwMTAyMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmMxOGQ0NmIxNjBhMTVmNjc1MDUxMDQ0ZjZlMDAyYWIxNDNlMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIEaWdi9660xUNy/sM+vKtHxPnBz o61SyHENWrIRfwrtYFaOTuLMMJ7F1dsL0KZnW3BA0QSc7jDVJ+g6GfuX3QvwSO8J DqCuIHcgYCZhK/qx5sSoVxe0QOyabY2dSfu6YQgKGKvife/Md9ZfnX6D7hou0IZh b2Ecfo1t9yo+y+M/fnixDIDm+z4GolMBXXrWVTBae/t/z+dH/593ov2cJhKbeiiz qOjdMOTRQLfDGdnP+JZoevklpKB3maobTgo1yTNqiAo20f2yRipQzGeEVQ10uIcI Uc1LrULq+YHgAJ87vNjx7bNHJnob/Z3xBKnpzv3zSrmV5oDSNUvqY/LGYQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFDvBjUaxYKFfZ1BRBE9uACqxQ+IXMB8GA1UdIwQY MBaAFAObATU+UaOofoNZY72IM+2BhT13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUt NGE4YjZiNDA4MmIxLzEvTzhHTlJyRmdvVjluVUZFRVQyNEFLckZENGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yY2Y4OGYtMmM2YS00YjQ4LWEyNWUtNGE4YjZiNDA4MmIx LzEvQTVzQk5UNVJvNmgtZzFsanZZZ3o3WUdGUFhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYpQAwQA udZJMA0EAgACMAcDBQAqABrBMA0GCSqGSIb3DQEBCwUAA4IBAQCOx2QMKSwe1NHD yXryNv8UAm9tsJS+gGKpykeP3s+PsMbHdBfHl5v0jTTtF2XXMhuL37uEmb4E396E pEz9FP93b5eSsHIGsoWgJjb6c6ugsOscsTUTyX8cU5QJ00nlr5LvB4KGVhet1cxP F1m6wAsWyBDC+rrYxrqfzsRjY24DNLgF8IAXQzykyttWRn0YV6K0GWSM/45yNs4k 27GweO2FPiQPtg8qwQ5qE6n5nbnueliPxDqz9ZpIE8o0VEbh78yxBlpwksC6eug3 Rix7VgmeeSaqKQsvOaf5rrl1h0MZnaqzhsqm+Rky5GGbKPrrYgtV81iCvqb5EsOx Qcx9ehVP -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:17 2026 by rpki-client